Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/799AC3DCF37511EA8AFFB171F8AEA228.roa
File:                     799AC3DCF37511EA8AFFB171F8AEA228.roa (raw, json)
Hash identifier:          W4unWpo/7J6ZczGEkgswdB3+JXpIPRq2SDg5ma1jzgM=
Subject key identifier:   27:84:56:57:49:40:C9:2A:1A:A6:68:71:47:AB:C0:E8:BD:2F:00:FA
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0244
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/799AC3DCF37511EA8AFFB171F8AEA228.roa
Signing time:             Thu 10 Sep 2020 14:54:07 +0000
ROA not before:           Thu 10 Sep 2020 14:54:02 +0000
ROA not after:            Tue 10 Sep 2024 14:54:02 +0000
asID:                     327687
IP address blocks:        196.43.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 10 14:54:02 2020 GMT
            Not After : Sep 10 14:54:02 2024 GMT
        Subject: CN=5f5a3e0f-5490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:74:ac:a9:2a:c0:9e:c3:0d:f5:e4:47:46:
                    cb:0d:c8:67:7b:bd:fd:7a:8a:c5:8d:7f:c0:80:8a:
                    d2:f8:be:f6:89:cc:08:04:b1:c8:70:9b:1c:d0:f9:
                    0f:3f:5c:aa:d2:27:ee:39:82:2a:6f:16:23:7e:1c:
                    7b:d7:58:f6:ff:3d:f3:83:9c:59:84:bc:e3:70:92:
                    cf:ff:3e:05:52:31:9a:4a:76:95:1f:9f:ca:bc:b6:
                    a8:51:aa:cc:12:89:50:f6:ab:2b:9f:9a:b7:b6:91:
                    8d:23:e6:b2:df:16:f9:ee:2f:77:d8:67:4c:82:79:
                    37:a8:9e:e9:f6:0d:bb:57:1b:79:24:3a:07:e1:31:
                    92:a6:e5:6f:96:12:33:3f:cf:16:c0:1d:c6:72:88:
                    7b:62:23:f5:b5:44:1b:76:0e:0e:c7:8f:75:40:39:
                    e6:3e:03:7a:5e:7f:f3:8a:a3:b7:46:e3:7c:1a:a6:
                    3b:b5:fe:07:8e:5a:26:b1:37:f0:1d:65:d8:fa:4d:
                    63:f6:c4:e1:6e:73:46:fb:67:dc:57:52:51:5e:a9:
                    e3:01:a8:07:0c:c9:bc:f9:ef:11:34:ca:f3:cf:cc:
                    9d:20:47:b3:d0:cc:ef:74:a8:d3:d1:7f:f7:27:db:
                    da:85:64:57:46:6e:15:43:6e:7b:83:ce:69:74:f6:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:84:56:57:49:40:C9:2A:1A:A6:68:71:47:AB:C0:E8:BD:2F:00:FA
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/799AC3DCF37511EA8AFFB171F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:f5:92:a5:cb:26:00:7a:1b:f5:b5:c3:10:1f:9d:24:80:
         a4:23:fb:6a:d0:c7:d9:95:ef:d1:1d:6a:07:57:84:4c:64:fc:
         67:b1:57:dc:88:76:fe:55:b6:ad:ff:32:0c:9e:94:d8:6d:76:
         c1:f7:de:c7:57:c6:cb:46:e0:7d:68:13:f0:97:76:36:5b:ec:
         47:1b:54:c8:2f:27:0a:f4:01:c8:43:da:27:6d:05:87:33:d0:
         74:3b:23:d7:22:35:98:e9:32:c7:44:0b:72:09:e8:79:de:69:
         b6:39:6b:a0:92:53:7e:df:74:86:3f:56:76:d4:73:e0:ba:f5:
         e2:ba:6b:95:61:26:08:5f:7a:0b:34:bc:ce:e6:d3:b0:21:5a:
         56:33:d9:de:ad:d2:0f:c6:d0:7c:3d:0a:fb:af:7e:38:d6:00:
         63:ea:e6:9d:af:1f:73:a3:90:b6:bc:25:c4:71:76:07:6c:c3:
         8f:03:36:c4:3f:cf:2f:d3:e3:e5:8c:d0:01:d2:a0:1d:58:b0:
         a2:f0:26:54:52:e9:f7:ef:18:fb:40:78:e3:28:1c:4e:73:fc:
         4f:f1:f5:19:05:a4:9d:d0:86:fe:b3:8f:b9:ac:0d:88:fb:91:
         b3:1b:e7:62:a5:d1:e9:cd:05:57:ac:93:5c:f0:2c:ed:a5:c4:
         b9:6d:20:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTAxNDU0MDJaFw0yNDA5MTAxNDU0MDJaMBgxFjAU
BgNVBAMTDTVmNWEzZTBmLTU0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvKXSsqSrAnsMN9eRHRssNyGd7vf16isWNf8CAitL4vvaJzAgEschwmxzQ
+Q8/XKrSJ+45gipvFiN+HHvXWPb/PfODnFmEvONwks//PgVSMZpKdpUfn8q8tqhR
qswSiVD2qyufmre2kY0j5rLfFvnuL3fYZ0yCeTeonun2DbtXG3kkOgfhMZKm5W+W
EjM/zxbAHcZyiHtiI/W1RBt2Dg7Hj3VAOeY+A3pef/OKo7dG43wapju1/geOWiax
N/AdZdj6TWP2xOFuc0b7Z9xXUlFeqeMBqAcMybz57xE0yvPPzJ0gR7PQzO90qNPR
f/cn29qFZFdGbhVDbnuDzml09rnlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJ4RW
V0lAySoapmhxR6vA6L0vAPowHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4Lzc5OUFDM0RDRjM3NTExRUE4QUZGQjE3MUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK4gwDQYJKoZIhvcNAQEL
BQADggEBAIsU9ZKlyyYAehv1tcMQH50kgKQj+2rQx9mV79EdagdXhExk/GexV9yI
dv5Vtq3/MgyelNhtdsH33sdXxstG4H1oE/CXdjZb7EcbVMgvJwr0AchD2idtBYcz
0HQ7I9ciNZjpMsdEC3IJ6HneabY5a6CSU37fdIY/VnbUc+C69eK6a5VhJghfegs0
vM7m07AhWlYz2d6t0g/G0Hw9CvuvfjjWAGPq5p2vH3OjkLa8JcRxdgdsw48DNsQ/
zy/T4+WM0AHSoB1YsKLwJlRS6ffvGPtAeOMoHE5z/E/x9RkFpJ3Qhv6zj7msDYj7
kbMb52Kl0enNBVesk1zwLO2lxLltIA8=
-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org